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Amendments to the Claims : 

This listing of claims will replace all prior versions, and listings, of claims in the 
application: 

Listing of Claims: 

1.-16. (Canceled) 

17. (Currently amended) An access control system in which a plurality of 
storage devices for storing Information resources and access controllers for 
controlling accesses to the information resources stored in the storage devices are 
connected with a network, each of the access controllers having an access control 
list on which access right to each information resource stored in the storage devices 
is recorded, and each of the access controllers having an access prohibition list on 
which access prohibited users are recorded who are prohibited from accessing any 
information resource stored in the storage devices, each access controller 
comprising: 

an access restriction module configured to restrict access to each information 
resource stored in a storage device and listed on the access control list of the access 
controller that records access right to each information resource; and 

an access Interception module configured to restrict the access by reference 
to the access prohibition list of the access controller, which records user information 
of access prohibited users, prior to the access control llst: _and 

an access control list update module configured to update the access control 
list according to the access prohibition list. 
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at least one of the access controllers having the updated access prohibition 
list further comprising a distribution module configured to send out the user 
information or the updated access prohibition list to the other access controllers in 
response to the update; and 

the other access controllers further comprising a list update module 
configured to receive the user information or the updated access prohibition list and 
to update the access prohibition list thereof to include the received user information 
or updated access prohibition list, 

wherein the distribution module of each access controller sends out the user 
information or the updated prohibition list to a predetermined other one of the access 
controllers, thereby transmitting the user information or the updated prohibition list 
from one access controller to a not h e r an other, and 

wherein the list update module deletes the user information on the access 
prohibition list at a predetermined timing . 

18.-28. (Canceled) 
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